Skip to main content

Year archive

CVEs published in 2026

Archive summary

42,966 CVEs published in 2026 — 4,543 Critical, 17,071 High, 17,284 Medium, 3,586 Low, 482 Unrated.

CVE-2025-61651

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-58383

Published Feb 3, 2026

A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security contro…

CVSS 8.4 · High
Vendor/product tagsBeta · best-effort

CVE-2025-58382

Published Feb 3, 2026

A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an authenticated, remote attacker…

CVSS 8.5 · High
Vendor/product tagsBeta · best-effort

CVE-2025-58379

Published Feb 3, 2026

Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege…

CVSS 6.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-12774

Published Feb 3, 2026

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access t…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-61650

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with…

CVSS 1.1 · Low

CVE-2025-61649

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser:…

CVSS 1.1 · Low

CVE-2025-61648

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61646

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki:…

CVSS 1.2 · Low
Vendor/product tagsBeta · best-effort

CVE-2025-61645

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-15556

Published Feb 3, 2026

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cr…

CVSS 7.7 · High
evidence mentions
2
Buzz score
42.5
KEV listed
Vendor/product tagsBeta · best-effort

CVE-2025-12773

Published Feb 3, 2026

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs…

CVSS 7.1 · High
Vendor/product tagsBeta · best-effort

CVE-2025-11261

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-11173

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14…

CVSS 0.0 · Unrated

CVE-2025-61647

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from…

CVSS 0.4 · Low

CVE-2025-61644

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated

CVE-2025-61643

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects Med…

CVSS 2.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2025-61642

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61641

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * befor…

CVSS 1.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2025-61640

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61639

Published Feb 3, 2026

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/Ma…

CVSS 1.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2025-61638

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vul…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61637

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61636

Published Feb 3, 2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with…

CVSS 0.0 · Unrated
Vendor/product tagsBeta · best-effort

CVE-2025-61635

Published Feb 3, 2026

Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects Confirm…

CVSS 0.0 · Unrated
Showing 38,451-38,475 of 42,966 CVEsPage 1539 of 1719